Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          NlTP5uz25WJ8vt1AQ3P0/n8V4MQBbScBwDm2h7KVcog=
Subject key identifier:   04:15:EC:01:3F:EB:5D:AD:4D:28:95:05:C8:AC:EA:94:2E:DB:CD:AE
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       7DE89007E6D397DE165EFCE6C9C34891A3F5A13E
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:06:31 +0000
ROA not before:           Tue 16 Sep 2025 13:01:31 +0000
ROA not after:            Tue 15 Sep 2026 13:06:31 +0000
asID:                     274726
IP address blocks:        2804:92a8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e8:90:07:e6:d3:97:de:16:5e:fc:e6:c9:c3:48:91:a3:f5:a1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:01:31 2025 GMT
            Not After : Sep 15 13:06:31 2026 GMT
        Subject: CN=0415EC013FEB5DAD4D289505C8ACEA942EDBCDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:bf:22:80:3d:e8:eb:d3:3f:7b:8d:1b:24:
                    8d:cc:16:76:e3:45:75:04:ae:b3:eb:0f:b9:55:4a:
                    99:dd:70:35:1e:8a:e2:ed:63:c0:f9:dc:3c:b2:05:
                    15:ff:7f:95:81:d6:d7:8f:ed:fc:5b:55:95:3e:0a:
                    6b:72:c1:1c:77:6b:aa:0e:e4:35:a8:9f:8e:b5:5d:
                    6c:5d:65:f0:cb:27:5d:f2:94:9e:9e:b4:4c:44:c5:
                    ae:0d:a2:80:16:00:ef:0d:87:8c:3b:14:49:35:cd:
                    7a:71:9a:88:d2:86:48:66:bb:e8:a6:c0:0b:3a:1d:
                    6a:d7:f0:04:68:74:ef:62:c5:89:5b:0e:33:ac:ad:
                    7c:69:d2:4c:3f:59:3f:bb:cf:11:c4:a9:3d:62:6b:
                    2d:11:e9:95:3d:0f:11:5e:30:51:bd:b0:a5:97:99:
                    1a:ac:48:9c:d9:45:49:e2:63:91:b4:d7:a3:fe:81:
                    5c:72:c4:3c:da:05:b5:b9:0e:c5:af:1c:3b:92:98:
                    02:3a:89:09:76:cd:a9:bf:1b:d4:b3:e1:bf:e3:97:
                    1f:42:96:31:06:8e:43:75:20:6a:b5:48:67:3f:1b:
                    25:0a:02:7f:fb:9b:ed:ca:6f:87:75:d8:00:f5:cc:
                    fe:f0:a2:ef:6b:e5:0c:60:e9:d2:f3:ad:f1:53:5e:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:EC:01:3F:EB:5D:AD:4D:28:95:05:C8:AC:EA:94:2E:DB:CD:AE
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:ca:f4:88:a6:5c:a2:90:81:cf:37:29:3a:a6:61:a0:b0:
         6c:bf:8b:c2:be:58:b7:3d:44:d0:6b:59:c8:7f:e7:23:b6:29:
         ca:7a:2d:06:56:56:63:82:4f:ea:ab:2d:dd:83:d6:40:1d:18:
         c4:40:c3:b4:b5:f6:af:17:18:b7:74:c9:db:50:92:c0:e3:a4:
         3f:dc:a8:97:ca:66:c4:04:66:df:c7:f5:ba:1d:89:f1:b3:d2:
         f7:e5:e4:a4:6d:bf:ab:4e:3c:24:b5:9a:bc:4f:80:49:d8:e5:
         52:21:ce:e3:78:e3:d6:bd:ce:4f:29:3e:ee:33:07:9b:41:a3:
         7c:47:34:48:b9:5a:24:4a:48:87:ff:ea:8e:05:ad:85:4a:1f:
         0f:08:e1:e2:76:a1:fb:d6:ab:8f:73:7f:f5:4c:1c:0f:1c:1c:
         dd:ce:37:86:bc:28:f4:46:a7:99:42:5e:52:73:80:6f:29:15:
         3e:cb:45:22:2b:83:d4:86:ba:ab:b0:ff:b8:66:06:cf:6d:da:
         61:7b:b1:d0:c5:24:2a:48:ae:21:7b:48:5e:7b:e8:c5:7a:68:
         00:1b:2e:3c:38:d7:b9:07:b5:a0:5f:d0:e4:27:4d:78:ce:01:
         10:b8:21:00:0d:2a:8d:52:44:d7:69:5e:7b:d1:01:4e:f8:15:
         12:ce:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:52 2025 by rpki-client